OffensiveWeb
Docs
  • Getting started
    • Introduction
    • Learning
    • Vulnerability / CTF reports
    • Cheatsheets
  • Client-side
    • Service Worker
    • DOM Clobbering
    • HTML Tags
    • Window object
    • XSS - Cross-site Scripting
    • Browser Cache
    • CSP Bypass
    • JSONP
    • Same Origin Method Execution
    • XSLeaks
  • Framework
    • Apache
    • DOMPurify
    • Drupal
    • Express.js
    • HTMX
    • Nginx
    • Node.js
    • Nuxt
    • Spring Boot
    • VueJS
    • Werkzeug
    • Wordpress
  • HTTP
    • Content-Type
    • Cookie
    • Cross-Origin Read Blocking (CORB)
    • Cross-Origin Resource Policy (CORP)
    • Cross-Origin Resource Sharing (CORS)
    • X-Content-Type-Options (XCTO)
  • Others
    • Browser exploit
    • Burpsuite
    • Debugging
    • Open Redirect
    • Parsing
    • Prototype Pollution
  • Programming
    • Ruby
    • Javascript
      • Javascript
      • Strange behavior
    • PHP
    • Python
      • Python
      • Class Pollution
      • Format String
  • Server-side
    • GraphQL
    • Server-Side Caching
    • SQL Injection
    • SSRF - Server-side Request Forgery
    • SSTI
      • Django Template
      • EJS
      • Pug
      • Tera
  • WriteUp
    • SEKAI CTF 2023 - Golf Jail
OffensiveWeb
  • Getting started
  • Client-side
  • Server-side
  • Framework
  • HTTP
  • Twitter
  • GitHub
Get started
Get started

Search

Loading search index…

No recent searches

No results for "Query here"

  • to select
  • to navigate
  • to close

Search by FlexSearch

  • Getting started
    • Introduction
    • Learning
    • Vulnerability / CTF reports
    • Cheatsheets
  • Client-side
    • Service Worker
    • DOM Clobbering
    • HTML Tags
    • Window object
    • XSS - Cross-site Scripting
    • Browser Cache
    • CSP Bypass
    • JSONP
    • Same Origin Method Execution
    • XSLeaks
  • Framework
    • Apache
    • DOMPurify
    • Drupal
    • Express.js
    • HTMX
    • Nginx
    • Node.js
    • Nuxt
    • Spring Boot
    • VueJS
    • Werkzeug
    • Wordpress
  • HTTP
    • Content-Type
    • Cookie
    • Cross-Origin Read Blocking (CORB)
    • Cross-Origin Resource Policy (CORP)
    • Cross-Origin Resource Sharing (CORS)
    • X-Content-Type-Options (XCTO)
  • Others
    • Browser exploit
    • Burpsuite
    • Debugging
    • Open Redirect
    • Parsing
    • Prototype Pollution
  • Programming
    • Ruby
    • Javascript
      • Javascript
      • Strange behavior
    • PHP
    • Python
      • Python
      • Class Pollution
      • Format String
  • Server-side
    • GraphQL
    • Server-Side Caching
    • SQL Injection
    • SSRF - Server-side Request Forgery
    • SSTI
      • Django Template
      • EJS
      • Pug
      • Tera
  • WriteUp
    • SEKAI CTF 2023 - Golf Jail

On this page

  • Node.js
  • Tips
    • Data import

Node.js

On this page
  • Node.js
  • Tips
    • Data import

Node.js#

Node.js is an open-source, cross-platform JavaScript runtime environment.

Tips#

Data import#

  • nodejs.org - data: imports

data: URLs are supported for importing with the following MIME types:

  • text/javascript for ES modules
  • application/json for JSON
  • application/wasm for Wasm
import 'data:text/javascript,console.log("hello!");';
import _ from 'data:application/json,"world!"' assert { type: 'json' }; 
Prev
Nginx
Next
Nuxt
    • Brought to you by Hyas